CVE-2025-41116: Incorrect oauth passthrough in Grafana Databricks Datasource
Vulnerability summary
CVE-2025-41116 is a low (CVSS 2.1) vulnerability in grafana labs grafana databricks datasource plugin. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 21.3% of scored vulnerabilities.
Not severe (CVSS 2.1, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 11-11-2025PublishedVulnerability first disclosed.
- 19-11-2025Last modifiedVulnerability information updated.
Description
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is not authorized being returned. This issue affects Grafana Databricks Datasource Plugin: from 1.6.0 before 1.12.0
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST2.1LowCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.27% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, low-privilege account, user interaction (CVSS vector). Other conditions: not stated in public data.
Grafana labs1 product
- grafana databricks datasource plugin≥ 1.6.0, < 1.12.1
1 vendor · 1 product